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Amendments to the Claimfi: 

These clauKis will replace all prior versions^ and listings, of claims in the ^plication: 
1-20. (Canceled) 

2 1 . (Previously presented) A program segment stored on a computer readable medium 
for cryptogFaphically convening a digital input data block M into a digital output data block; said 
program segment comprising: 

a program portion for merging a selected part Ml of said digital input data block M with 
a first digital key Kl to produce a data block Bl which non-lioearly depends on said selected part 
Ml and said first digital key Kl; and 

a program portion for deriving said digital output block from said data block Bl and the 
remaining part of the digital ii^ut data block M, wherein said merging step is performed by 
executing a non-linear function g for non-linearly merging said selected part Ml and said first 
key Kl in a single step. 

22. (Previously presented) A program segment as claimed in claim 21 , comprising: 

a program portion for splitting said digital input block into said selected part Ml and a 
second part M2 before executing said program portion for merging; 

a program portion for executing a non-linear function g'^ to merge said second block M2 
with a second key K2 in one step, producing a data block B2 as output; said non-linear function 
g'^ beitig th& inverse of said non-linear function g; and 
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a program pottiou for forming combined data from data in said data block Bl and in said 
data block B2; said digital output block beiikg derived from said combined data. 

23. (Previously presented) A program segment as claimed in claim 21, wherein said 
program portion for merging comprises: 

a program portion for splitting said selected part Ml in a first plurality n of sub-blocks 
mo,..4nii-i of substantially equal length; 

a program portion for splitting said first key Kl in said first plurality n of sub-keys 
ko,..,knHi, substantially having equal length, the sub-key kj corresponding to the sub-block my for i 
= Oton-l; 

a program portion for separately prooessmg each of said sub-blocks m$ by executing for 
each of said sub-blocks mi a same non-linear funcdon h for non-linearly merging a sub-block bi 
derived fiom said sub-block uu with said corresponding sub-key kj in one, sequentially insepar- 
able step and producing said first plurality of output sub*blocks h(bi, ki); and 

a program portion for combining sub-blocks tj derived &am said first plurality of said 
output sub-blocks h(bj» kj) to fotm said data block Bl. 

24. (Previously presented) A program segment as claimed in claim 22, wherem said 
program portion for executing said non-linear function g'^ comprises: 

a program portion for splitting said second part M2 in said first plurality n of sub-blocks 
mo»»;m2n.]* substantially having equal length; 
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a program portion for splitting said key K2 in said first plurality n of sub-keys k^v ^k^o-^ 
substantially having equal length, the sub-key kj corresponding to the sub-block nii^ for i = n to 
2tt-l; 

a program portion for executing for each of said sub-blocks mi a same non-linear function 
h'^ for non^linearly merging a sub-block b^ derived £:om said sub-block mi with said 
corresponding sub-key ki and producing said first plurality of an output sub-block h'^(bb kj); said 
fimction h ' being the inverse of said fimction h; and 

a program portion for combining sub-blocks t\ derived fiom said first plurality of output 
sub-blocks h~^(bi, ki) to form said data block B2. 

25. (Previously presented) A program segment as claimed in claim 23, Miiierein said 
sub-block bi is derived from said sub-block tUj by bit-wise adding a constant pi to said sub-block 
mi, said constant pi substantially having equal length as said sub-block mi. 



26. (Previously presented) A program segment as claimed in claim 23, characterised in 
that said fimction h(bi4ci) is defined by: 

h(bi4ci) = (b^ki)■^ if bi 9t 0, ki ^ 0, and bi b 

h(biJCi)-(ki)-^ ifbi = 0 

h(biJci) = (bi)^ ifki = 0 

h(bi,k|)- 0, ifbi-ki, 
where the multiplication and inverse operations are predeteitnined Galois Field multiplication 
and inverse operations. 
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27, (Previously presented) A program segment as claimed in claim 26, wherein deriv- 
ing said sub-blocks ti from said output sub-blocks li(bi, ki) comprises bit^wise adding a constant 
di to said output sub*block h(bi,ki), said constant di substantially having equal length as said sub- 
block mj. 

28, (Previously presented) A program segment as claimed in claim 27, u^ierein deriv- 
ing said sub-blocks ti from said output sub-blocks h(bi, ki) further comprises raising h(biJcO 0 di 
to a power 2^, using said predetermined Galois Field multiplication. 

29, (Previously presented) A program segment as claimed in claim 26, wherein deriv- 
ing said sub-blocks ti from said output sub-blocks h(bi, kO comprises raising said output sub- 
block h(bi^) to a power 2^ using said predetermined Galois Field (GF) multiplication. 

30* (Currently amended) A program segment as claimed in claim 24, wherein said 

combined data is formed by: 

swapping the sub-blocks and t^orUi^ for i = 0 to n-L 

31. (Previously presented) A program segment as claimed in claim 26, herein said 
sub-block mi comprises eight data bits, and wherein said multiplying of two elements b and c of 
GF(2*) comprises executing a series of multiplications and additions in GF(2^. 

32. (Previously presented) A program segment as claimed in claim 31, wherein said 
multiplying of said two elements b and c comprises: 
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repxesenting b as ao + aj.D and c as aa + a3,D, vdiere ao, ai, a2 and as are elements of 
GF(2*X where D is an element of GF(2*) defined as a root of an irredudble polynomial k(x) 
=^ H- X + P over GF(2*), where p is an element of GF(2'*); and 

calculating (aoa2 + aiasp) + (aia2 + aoas + aia3)-D. 

33. (Previously presented) A program segment as claimed in claim 32, wherein p is a 
root of an irreducible polynomial b(x) ^x^ + x^ + x^ + x+ l over GF(2). 

34. (Previously presented) A program segment as claimed in claim 26, ifsterein said 
sub-block mi comprises eight data hits^ and wherein calculating the inverse of an element b of 
GF(2*) comprises perfomiing a series of calculations in GF(2*). 

35. (Previously presented) A program segment as claimed in claim 34, wherein 
calculating the inverse of said element b comprises: 

representing b as ao + ai JD, where ao and ai are elements of GF(2*), and where D is an 
element of GF(2*) defined as a root of an ineducible polynomial k(x) = + x + p over GF(2'*X 
vdiere p is an element of GF(2'^; and 

calculating (ao^ + aoai + ai^p)'*((ao + aO + aiD). 

36. (Currently amended) A processor for cryptogr^hically converting a digital input 
block into a digital output block; said processor comprising: 

a first input means for obtaining said digital input block; 
a second input means for obtaining a first key Kl; and 
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a cryptographic processing means arranged to convert the digital input block into the 
digital output block by executing a non-linear function g for non-Iinearly merging said selected 
part Ml and said first key Kl in one step and producing a data block Bl which non-linearly 
depends on said selected part Ml and said first key Kl^ where a selected part of said digital 
ou^ut block is derived firom said data block Bl . 

37. (Currently amended) A processor as claimed in claim 36, ^lierein said processor 

comprises a third input means 'for obtaining a second key K2, and wherein said processor is 
arranged to: 

split said digital input block into said selected part Ml and a second part M2 before 
performing said merging; 

perform a non-linear function g'^ to merge said second block M2 with said second key K2 
in one step, producing a data block B2 as output; said non-linear fimction g~^ being the inverse of 
said non-linear function g; and 

combine data from data in said data block Bl and in said data block B2; said digital 
output Mock being d^ved from said combined data. 

38< (Previously presented) A processor as claimed in claim 36, wlierein said merging 
comprises: 

splitting said selected part Ml in a first plurality n of sub-blocks rno3..^n-i of 
substantially equal length; 

splitting said first key Kl in said first plurality n of sub-keys ko^- J^u substantiaUy 
having equal length, the sub^key ki corresponding to the sul>-block m^ for i = 0 to n-1 ; and 
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separately processing each of said sub-blocks mi by executing for each of said sub-blocks 
mi a same nou-linear function h jfbr non-linearly mergiDg a sub-block bj derived fix>m said sub- 
block trn vvith said corresponding sub-key ki in one, sequCTtially inseparable step and producing 
said first plurality of output sub-blocks h(b{, kO; and 

combiniiig sub-blocks ti derived from said first plurality of said output sub-blocks h(bi, kO 
to form said data block BL 



39. (Previously presented) A processor as claimed in claim 38, \dierein said function 
h(b Jq) is defined by: 

h(bi,ki) = (bi,ki)'^ if bj o, ki ^ 0» and bi 96 ki 
h(biJci) = (ki)'^ ifbi = 0 

h(biJci)-(bjX^ ifki = 0 

h(b,4ci)=0, ifbi = ki, 

^ere the multiplication and immerse operations are predetennined Galois Field multiplication 
and inverse operations. 

40. (Previously presented) A processor as claimed in claim 39, wherein said sub-block 
ms comprises eight data bits, and wherein said multiplying of two elemetxts b and c of GF(2*) 
comprises: 

representing b as ao + aj^D and c as ai + a^.Dy where ao, ai, az and 33 are elements of 
GF(2^, and where D is an element of GF(2^ defined as a root of an irreducible polynomial k(x) 
= + X + p over GF(2*), where p is an elemeirt of GF(2^); and 

calculating (aoa^ + aiasP) + (aiaj + aoaa + aia3).D; 
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and wherein calculating the inverse of an element bofGF(2*) comprises calculating (ao'^ aodi + 
aiWk(ao + a,) + a,D). 
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